Archives

Field notes on Entra ID, Azure and identity security — written down properly instead of disappearing into a scratch file.

Restricted Management Administrative Units contain a service principal holding Application.ReadWrite.All — but the design depends on three configurations Microsoft does not document. All three tested against a live tenant with az rest.